CVE List

Id CVE No. Status Description Phase Votes Comments Actions
8820  CVE-2004-0392  Candidate  racoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and dropped connections) via an IKE message with a malformed Generic Payload Header containing invalid (1) "Security Association Next Payload" and (2) "RESERVED" fields.  Assigned (20040413)  None (candidate not yet proposed)    View
8821  CVE-2004-0393  Candidate  Format string vulnerability in the msg function for rlpr daemon (rlprd) 2.0.4 allows remote attackers to execute arbitrary code via format string specifiers in a buffer that can not be resolved, which is provided to the syslog function.  Assigned (20040413)  None (candidate not yet proposed)    View
8822  CVE-2004-0394  Candidate  A "potential" buffer overflow exists in the panic() function in Linux 2.4.x, although it may not be exploitable due to the functionality of panic.  Assigned (20040413)  None (candidate not yet proposed)    View
8823  CVE-2004-0395  Candidate  The xatitv program in the gatos package does not properly drop root privileges when the configuration file does not exist, which allows local users to execute arbitrary commands via shell metacharacters in a system call.  Assigned (20040413)  None (candidate not yet proposed)    View
8824  CVE-2004-0396  Candidate  Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines.  Assigned (20040413)  None (candidate not yet proposed)    View

Page 851 of 20943, showing 5 records out of 104715 total, starting on record 4251, ending on 4255

Actions